PT-2024-20069 · Hms · Hms Anybus X-Gateway Ab7832-F

Published 2024-06-26 · Updated 2024-10-25 · CVE-2024-23766

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions HMS Anybus X-Gateway AB7832-F 3 devices

Description The issue concerns the exposure of a web interface on port 80, allowing an unauthenticated GET request to a specific URL to trigger the reboot of the gateway or most of its modules. This can be exploited to carry out a denial of service attack by continuously sending GET requests to that URL.

Recommendations For HMS Anybus X-Gateway AB7832-F 3 devices, as a temporary workaround, consider restricting access to the web interface on port 80 to minimize the risk of exploitation. Avoid using the vulnerable URL in the web interface until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-598

Related Identifiers

CVE-2024-23766

Affected Products

Hms Anybus X-Gateway Ab7832-F

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2024-23766 · Security Note
• https://t.me/cvenotify/84579 · Telegram Post
• https://t.me/cvenotify/99541 · Telegram Post
• https://sensepost.com/blog/2024/targeting-an-industrial-protocol-gateway · Note